The person has to already have a password attribute (a column in the people
table), but the password_confirmation is virtual. It exists only as an
in-memory variable for validating the password. This check is performed
only if password_confirmation is not nil and by default on save.